VMware Workstation ThinPrint EMF Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities (CVE-2020-3980, CVE-2020-3986, CVE-2020-3987, CVE-2020-3988, CVE-2020-3989, CVE-2020-3990)

3a. PATH configuration privilege escalation vulnerability CVE-2020-3980 VMware Fusion contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3...

KLA12099 Multiple vulnerabilities in VMware Workstation and Player

Multiple vulnerabilities were found in VMware Workstation and Player. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. A out of bounds read vulnerability in Cortado ThinPrin...

VMSA-2020-0020:VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities

Advisory ID: VMSA-2020-0020.1 CVSSv3 Range: 3.8-6.7 Issue Date:2020-09-14 Updated On: 2020-11-19 CVEs: CVE-2020-3980, CVE-2020-3986, CVE-2020-3987, CVE-2020-3988, CVE-2020-3989, CVE-2020-3990 Synopsis: VMware Workstation, Fusion and Horizon Client updates address multiple security vulnerabilities...

Security Bulletin: Vulnerability in side channel in Intel CPUs affect IBM Cloud Pak System (CVE-2019-11135)

Summary IBM Cloud Pak System when using Intel CPUs could allow a local authenticated attacker to obtain sensitive information. OS image for RedHat Enterprise Linux for Cloud Pak System is shipped as component for IBM Cloud Pak System. OS image for RedHat Enterprise Linux addressed vulnerability...

Photon OS 1.0: Linux PHSA-2020-1.0-0323

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0323. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140495...

Top Three Demos at VMworld 2020: Security, Threat Hunting, and Beyond

VMworld 2020 Sept. 29- Oct. 1 is fast approaching. This year, and for the first time ever, VMworld will showcase a new intrinsic security track featuring 50+ sessions on the future of workspace and workload security. Attendees will have the opportunity to participate in hands-on workshops, hunt f...

The U.S. Secret Service Selects Tom Kellermann to Serve on Inaugural Cyber Investigations Advisory Board

Cybersecurity has become a recurring global news headline. From ransomware to data breaches, cyberattacks continue to be one of the biggest threats to both the private and public sectors. Earlier this year, the FBI reported a 400 percent increase in cybercrime1. And for the public sector, this is...

VMware Carbon Black First to Block Hidden Malicious Commands in Obfuscated Scripts

For a long time now, our Threat Analysts have flagged the growing threat of script-based attacks, especially from Microsoft PowerShell and Windows Management Interface script commands, and their ability to escape notice in many antivirus solutions. Increasingly, these types of attacks have become...

Photon OS 3.0: Elasticsearch PHSA-2020-3.0-0135

An update of the elasticsearch package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140410;...

Photon OS 3.0: Kibana PHSA-2020-3.0-0135

An update of the kibana package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0135. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140411;...

Unspecified Vulnerability in VMware Spring Cloud Netflix

Spring Cloud Netflix is various Netflix OSS component integrations. A security vulnerability exists in VMware Spring Cloud Netflix versions 2.2.x prior to 2.2.4, 2.1.x prior to 2.1.6, and unsupported older versions, which can be exploited by an attacker to send requests to other servers...

Photon OS 3.0: Ntp PHSA-2020-3.0-0133

An update of the ntp package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0133. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140112;...

Photon OS 1.0: Pam_Tacplus PHSA-2020-1.0-0319

An update of the pamtacplus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0319. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Net PHSA-2020-2.0-0279

An update of the net package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140115;...

Photon OS 2.0: Bindutils PHSA-2020-2.0-0279

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Redis PHSA-2020-2.0-0278

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0278. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140122...

Photon OS 3.0: Go PHSA-2020-3.0-0130

An update of the go package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0130. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140118; scriptversion"1.7"...

Photon OS 3.0: Trousers PHSA-2020-3.0-0131

An update of the trousers package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0131. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid140126;...

Photon OS 2.0: Pam_Tacplus PHSA-2020-2.0-0280

An update of the pamtacplus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0280. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...